[jira] [Resolved] (INFRA-7093) apache.org mail servers should support TLS

["Tony Stevenson (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/INFRA-7093?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Tony Stevenson resolved INFRA-7093.
-----------------------------------

    Resolution: Won't Fix
      Assignee: Tony Stevenson

Ben, 

This is a personal pet hate of mine too, but quite honestly implementing it is not simple.  We will be reviewing the whole of the mail infrastructure in the latter part of the year and this *will* form part of our service going forward after that.


> apache.org mail servers should support TLS
> ------------------------------------------
>
>                 Key: INFRA-7093
>                 URL: https://issues.apache.org/jira/browse/INFRA-7093
>             Project: Infrastructure
>          Issue Type: Improvement
>          Components: Mail (qmail)
>            Reporter: Ben Reser
>            Assignee: Tony Stevenson
>              Labels: #bugbasg
>
> There really is no great reason not to have TLS setup on at least the hosts in the MX record.  While obviously end to end encryption with GPG is better, having TLS setup is better than nothing.
> Searching for existing issues on this didn't find much but I did find this issue:
> https://issues.apache.org/jira/browse/INFRA-5440
> The response there seems to be that the certificate available isn't licensed for mail server use.  Surely this isn't an impossible thing to overcome.  If nothing else StartCom offers free SSL certificates.



--
This message was sent by Atlassian JIRA
(v6.2#6252)